Описание
Duplicate Advisory: tgstation-server vulnerable to cached user logins in legacy server
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-42r6-p4px-qvv6. This link is maintained to preserve external references.
Original Description
In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeed with any username or password.
Пакеты
Наименование
TGServiceInterface
nuget
Затронутые версииВерсия исправления
>= 3.2.1.0, <= 3.2.4.0
3.2.5.0
9.8 Critical
CVSS3
9.8 Critical
CVSS3